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Abstract. In this article, we give a complete description of the characteristic 
polynomials of supersingular abelian varieties over finite fields. We list them 
for the dimensions upto 7. 



1. Introduction 

Supersingular abelian varieties have applications in cryptography and coding 
theory and related areas. Identity based ecryption and computation of weights of 
some Reed Muller codes are some of them. An important (isogeny) invariant which 
carries most of the information about supersingular curves is the characteristic 
polynomial of the Frobenius endomorphism. Here, we give a complete description 
of the characteristic polynomials of supersingular abelian varieties over finite fields. 
We list them for the dimensions upto 7. 

2. Background 

Definition 2.1. Let A be an abelian variety of dimension g over ¥q, where q= . 
For I ^ p, the characteristic polynomial of Frobenius endomorphism -ka is defined 
as 

Pa{X) ■.^det{T:A-XId\v,(A)). 

The above definition is independent of choice of I. The coefficients of Pa{X) are 
in Z. Moreover, Pa{X) can be represented as 

Pa{X) = X29+aiX29-i+. . .+a,x29-'+. . ■+agXS+qag-iXS-^+- ■ ■+qa-'a,X'+- ■ ■+q 

Definition 2.2. A Weil-q-numher tt is defined to be an algebraic number such 
that, for every embedding cr : Q[7r] '-7> C, |cr7r| = (j^ holds. 

For q = , the real Weil polynomials are X^ — q when n is odd and X — ^ when 
n is even. Otherwise, the set of roots of Pa{X) has the form {ui,uJi, . . . ,ujg,uj^}, 
where the w^'s are Weil-q- numbers. A monic polynomial with integer coefficients 
which satisfies this condition is called a Weil polynomial. Thus, every Weil polyno- 
mial of degree 2g has the form above for certain integers a; £ Z. The converse is 
false; indeed, since the absolute value of the roots of P{X) is prescribed (equal to 
y/q), its coefficients have to be bounded. 

An abelian variety A is k-simple if it is not isogenous to a product of abelian 
varieties of lower dimensions over k. In that case. Pa (A) is either irreducible over 
Z or Pa{X) = h{XY , where h{X) e Z[A] is an irreducible, monic polynomial over 
Z; see Milne and Water house in [I]. We have the following result from Tate [2]. 
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Theorem 2.3. Let A and B be abelian varieties defined over ¥q. Then A is ¥q- 
isogenous to an abelian subvariety of B if and only if Pa{X) divides Pb{X) in 
Q[X]. In particular, Pa{X) ~ Pb{X) if and only if A and B are ¥ q-isogenous. 

Let W{q) be the set of Weil-g-number in C. We say that two elements tt and 
TT are conjugate^ if tt and tt have the same minimum polynomial (called Weil 
polynomial) over Q. 

The conjugacy class of 'ka depends only on the isogeny class of A, more precisely, 
we have the following theorem from 3 . 

Theorem 2.4. (Honda- Tate theorem) The map A tta defines a bijection 
{simple abelian varieties /¥q}/ (isogeny) i-> W{q)/ (conjugacy). 

In otherwords, given an irreducible Weil polynomial P(X), there exist an unique 
abelian variety upto isogeny and e a natural number such that Pa(X) = P(X)'^. 

A Weil-q number tt is called a supersingular Weil-q-number if tt = ^JqC^ where C 
is some root of unity. 

Definition 2.5. An abelian variety A over k is called supersingular if any one of 
the following (equivalent) conditions holds: (see [H Theorem 4.2]) 

(1) the eigenvalues of the Frobenius it a are supersingular Weil-g-numbers; 

(2) the Newton polygon of A is a straight line of slope 1/2; 

(3) A is /c-isogenous to a power of a supersingular elliptic curve. 

We have the following useful theorem from [3]. 

Theorem 2.6. Let A be a simple abelian variety over k = ¥q, then 

(1) Endk{A) ® Q is a division algebra with center Q{tta) and 

2dimA = [Endk(A) ® Q : Q(^a)]^Mtta) : Q]. 

(2) The division algebra Endk(A) (g) Q over Q(tta) has the following splitting 
behaviour 

(a) it splits at each divisor I of I in Q(nA), ifl^p, 

(b) the invariants at the divisors p of p in Q(7r^) can be evaluated with 

inv,(Endk(A) ® Q) = ^!ii^[Q(nA), : QJ mod Z, 

where Q(7ryi)p denotes the completion of Q(t:a) o,t P Bind Vp denotes 
the p-adic valuation. 

(c) it does not split at the real places ofQ(nA). 

If A is a supersingular abelian variety, then tta = ^/qC, where ( is some root of 
unity. If A is also simple, then it follows from above theorem that invp{Endk{A) (E) 
Q) = ^Cifi mod Z, where is the ramification index of p over p and fi is the 
residue class degree. 

Also, TT G Q be the supersingular Weil-g-number and P(X) be the corresponding 
minimal Weil polynomial. The invariants of Endk(A) (g) Q lie in Q/Z. They can 
be evaluated from the minimal polynomial P(X) of tta as follows. The only real 
Weil numbers are q^^^ and -g^/^ , so there are hardly any real places of Q(7r^). We 
consider the polynomial P{X) in Qp[X], i.e., over the p-adic numbers. Let 
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Pix) = llMx) 
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be the decomposition in irreducible factors in Qp[X]. The factors fi{X) correspond 
uniquely to the divisors pi of p in Q(7r^). So to get the invariants, we have to factor 
P{X) over Qp. Indeed, 

mi;p. {Endk [A) ®Q)= ""^^^'^"^^ mod Z. 

deg/i 

If P{X) is a supersingular Weil polynomial, then /^(O) = \/9Cj: where Qj is 

some root of unity. In that case, invp iEnddA) — = — mod Z. 

n 2 

Therefore the order of invariants is either 1 or 2 in Q/Z depending on whether 
deg fi is even or odd respectively. We use the invariants in order to evaluate the 
dimension of A as follows. 

Since Endk{A) (X) Q is a division algebra and Q{t:a) is a number field, the num- 
ber [Endk{A) (g) Q : Q{7ta)]^ is equal to the order of Endk{A) (g) Q in the Brauer 
group of Q(7r^) see theorem 18.6, 5,, which turns to be equal to the least common 
multiple of the orders of all the local invariants in Q/Z; see theorem 18.5, 5^. This 
fact, along with the Theorem 12.61 gives the dimension of A. 

The rest of section is dedicated to background useful for computing supersingu- 
lar Weil polynomials. 

Let U{Z/mZ) denote the multiplicative group of integers modulo m and be 
a primitive m-th root of unity. Then there exist a natural isomorphism of groups 

[/(Z/mZ) ^ Ga/(Q(C™)/Q), a ^ a, 

where cra(Cm) = Cm- There is a unique nontrivial homomorphism U{'Z,/p'Z) {±1} 
{p an odd prime), the Legendre symbol a — )■ (^). The group [/(Z/8Z) = {±1,±3} 
admits three nontrivial quadratic characters (homomorphisms to {±1}): 

(1) £, defined by e(a) = a mod 4. 

(2) X2, given by X2(±l) = 1, X2(±3) = -1. 

(3) X-2, given by X-2(l) = X-2(3) = 1, X2(-l) = X2(-3) = -1. 
For any odd prime p, y/±p € Q(C4p) a-nd 



aa{V±p) 



i^)y/±p if±p=l mod 4; 
e(a)(pV±p if±pEE3 mod 4. 



V±2 e Q(C8) and for a G [/(Z/8Z), 
For an odd prime p we let 



P 



= { — )P 
P 



p if p = 1 mod 4 
—p if p = 3 mod 4 
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For p an odd prime and t any odd number let 

aeU{1/pt1) ^ 
aeU(Z/tZ) 

^-2Ax):^ n (.x-Cscmx-ciCt)- 

aeU(1/t1) 

The polynomials below 

^p.tix) e Q(v^)[X] 
*_2,t(x)eQ(v^)[x] 

factor as a product of 2 irreducibles over Q(v^)[X], Q(V2)[X], Q(\/^)[X] re- 
spectively. For example '^p,t{X) = ((X)*^ where 4'p,t(X) ]\-l=i{X - 

= l)Cp"i) and %}{X) = n^=-i(^ + (f )Cp"t)- 
If if is a field, /(X) e K[X] and a e if^, then let f^^X) := a'^''^ff{§). Then 
*2^'(X), e Q[X] and are ah irreducible over Q. 

3. Odd case 

Theorem 3.1. Let A be a supersingular simple abelian variety over Fg with q = p^ 
with r odd. If the characteristic polynomial of A, Pji{X), has no real root, then 
Pa{X) is irreducible. 

Proof. If A is a supersingular abelian variety then it follows from the Theorem 12.61 
that, invp{Endk{A) (g) Q) = ^e^/i mod Z, where ei is the ramification index of p 
over p and fi is the residue class degree. 

But Ci — e — Vp{p) — 2vp{y/p). This implies invp{Endk{A) (g) Q) = mod Z. In 
otherwords, order of invariants is zero and 2 dimv4 is equal to the degree of the Weil 
polynomial. This along with the definition of the characteristic polynomial implies 
Pa{X) is irreducible. □ 

Remark 3.2. If P{X) is a supersingular Weil polynomial with all real roots, over 
¥q with q = p", n is odd, then P{X) = X^ — q, then we have least common 
multiple of local invariants as 2, hence P{X)^ is a characteristic polynomial of 
simple supersingular abelian variety of dimension 2, see [6]. 

Let p be a prime and q — {^pY with r odd. We wish to calculate the minimal 
polynomial over Q of ^/qC,m. Without lost of generality we assume that m = At for 
some t since = V^ldCn = ■ 

Theorem 3.3. Let 9 = ^/qCit- We distinguish two cases. 
(1) Normal case If either 
(a) q is odd and 

(i) t is even or 

(ii) p\t or 

(iii) q = 1 mod 4 
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or 

(b) q is even and t^2 mod 4. 

then the minimal polynomial of 9 over Q is ^^^{X). 
(2) exceptional case 

(a) If q = 3 mod 4 anrf p\t and t is odd, then the minimal polynomial of 

Pi p 

(b) If q > is even and t = 2s = 2 mod 4, then the minimal polynomial 
of0^s^ifiX). 

(c) If q < is even and t = 2s = 2 mod 4, i/ien the minimal polynomial 

ofe is^^^^ix). 

Proof. Case (A) First suppose p]t. Then y/q ^ Q(C4t) and 

r := Ga/(Q(^,C4t)/Q) =< a > xGaZ(Q(C4t)/Q) where a{^) = a(C4t) = 

Ut. 

Let T G r and suppose t{6) = 0. 
Case 1: r = CTo, a G [/(Z/4iZ) imphes y^C4t = v^CIt which imphes a = 1 which 
impUes r = 1. 

Case 2: r = crcTa imphes y/qC4t = ^y^Qt imphes Qt = ^C4t = Clt^^* which im- 
plies a = 2t + 1. So the subgroup of T fixing 6* is {l,aai+2t} and Ga2((Q(6')/Q) = 
GaZ(Q(C4t)/Q). In particular, the conjugates of 6 over Q are (Ta{0) = \/qC,u, and 

the minimal polynomial of 6 over Q is J| {X - s/qQt) = ^4t^^ (^)- 

aei7(Z/4tZ) 

Case B. 

Now suppose p is odd and p\t. Then e Q(C4t) and if a e Uil^/AfL) we have 
r ^ / (f)v^^4t if 9=1 mod 4; 

Suppose q = mod 4 and aa{e) = 9. Then (pCft = C4t- If (|) = 1 then a = 1 
in U{Z/4:tZ) implies ctq = 1. However (|) = —1 implies ^44 = Clt^^* which implies 
a = l-|-2tora=l mod p. This implies (|) = 1 which is a contradiction. 
So ctq = 1 and Gal{Q{6)/<Q) = (Q(C4t)/Q) whence the minimal polynomial of 6 is 

Now suppose q = 3 mod 4 and C7a(^) = 9. Then ^4^ = e(a)(|)y^C4f Since 
e {1,-1} we have a e {1,1 + 2t}. If a = 1 + 2t then (|) = 1 and 
e{a) = 1 + 2f mod 4 = — 1 if and only if t is odd. Thus if t is even, the minimal 
polynomial of 6 is <^>^^{X). 

However, if t is odd, then 6 is fixed by a"i+2t and hence the degree of its minimal 
polynomial over Q is ^<j>{4:t) = 4>{t). However, in this case ,/qC,u = i-^^^t = 
±^/(fC.t € Q(Ci) and thus its minimal polynomial is l\aeu{z/tz)i^ " i^)Ct) = 
^'[^(X). Case C: q is even and 2\t. So 4t = 8s. Let C = C4t = Cs^- Then 9 e QC 
and 

^ fn\ ^ ( f7;/-\ / fe(a)V9C if<7>0; 

I X-2(a)V9C if <? < . 
Suppose aa{9) = 9. Then x±2(o) = -1 Then a = 1 + 4s € C/(Z/8sZ). If s is 
even then a = 1 mod 8 which implies X±2(o) = 1 which a contradiction. Thus if s 
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is even, the minimal polynomial of 9 is ^^^{X). 

We can suppose that At = 8s with s odd. Then 1 +4s = -3 e U{I./d,sZ). It follows 
that 9 is fixed by the {1,cti+4s} and so its minimal polynomial has degree \(j){At). 
We can write C as a product C,sCs- So 9 = y^CsCs- 

If g > 0, the conjugates of 6 are y^CsC and ^/qCs^Cs ^ ^ ranges over f/(Z/sZ). 
Thus the minimal polynomial is 

n - v^C8C)(^ - v^Cs-'C) = ^if{x). 

aeU{Z/sZ) 

Similarly, if g < 0, the minimal polynomial of 9 is ^'[^^(X). 

This proves the theorem. □ 

Remark 3.4. (1) In the normal case, the degree is <^(4f) and in the exception 

case the degree is ^4>(4:t). 

(2) Since e Q[X], it follows *p,t(X) € Q(v^)[X] and the coeffi- 
cients of even powers are rational (even integers) and the coefficients of odd 
powers are integer multiples of ^/p*. Similiar is true for ^±2^t{X). 

(3) If p is odd, then "ip^t is a reciprocal polynomial when p = 1 mod 4 and 
anti-reciprocal (i.e; i:'*^s*''-**p,t(-^)) = ^p,t{X)) when p = 3 mod 4. 

(4) ^p^t{X) acutally depends on the choice of (pt- If we replace it with (^^ 
where (|) = —1 then we get ^'p^t(— X). Similiar is true for 'i/±2^t{X). We 
have 

(5) It easily follows that polynomial t can be calculated recursively in the 
same way as cyclotomic polynomials. 



^„,,,.{X) = ^p,t{XP ). 
While if Hs a prime not dividing t then 



4. Dimension 1 

4.1. Normal Case. In this case (l){4:t) = 2g = 2 which implies t = 1. Therefore 
X^ ± g is a Weil polynomial. 

4.2. Exceptional Case. In this case ^(j){4t) = 2g = 2. That implies 4i e {8,12} 

or t € {2, 3}. In case t = 2 then q = (±2)'' with r odd. Then, 

(1) If gr > then the minimal polynomial of 9 is ^2^'(X). 

But, *2,l(X) = {X-Cs){X-Cs^) = X2±(C8 + C8"')^ + 1 = X^±V2X + 1. 
Therefore {X) = X^ ± ^qX + q. 

(2) If g < 0, then the minimal polynomial of 9 is 

But, *2,l(^) - (X-C8)(^-C|) =^'±(C8 + C8)^-1 = ^'±^^-1- 

Therefore ^'^^^^{X) = X^ ± ^/^X - q. 
In case t = 3, then p = 3 and g = 3'' with r odd. In that case, the minimal poly- 
nomial of 61 is ^^^\x). 
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But, -^3,1 W= n ix-ilKS) = x'-Y,il)x + i = x'±V^x-i. 

aeU(Z/3Z) a=l 



Therefore (X) = X"^ ± + q. 



5. Dimension 2 

5.1. Normal Case. In this case 4>{U) = 2g = 4. That impUes 4t e {8, 12} or 
t e {2, 3}. Therefore either t = 2, p odd and minimal polynomial is 

or t = 3, , r odd and minimal polynomial is 

^^^\X) = X^ ~ qX^ + q\ 

5.2. Exceptional Case. In this case \(i){4t) =2g = 4. That implies 4t € {16, 20, 24} 
or t e {4,5,6}. 

(1) Either p is odd, t is odd, p divides t, q = 3 mod 4. 

In that case, t = p = 5, q = (-S)"" with r odd and ^\y^(X) is the 
minimal polynomial of Wc have i(X)vI'5.i(— X) = $5(X^). Therefore, 
^-5,1 (X) = X^± + ± + 1 and 

(X) = ± v/^X-'^ - SqX^ T q\^X + q\ 

{2) t=2 mod 4, g = (±2)'' with r odd. In that case, f = 6 = 2 • 3 mod 4. 
Then 

(a) If (7 > then the minimal polynomial of 6 is ^'2^^(X). 
But, 

*2,3(X) = ^^^i^ = ± ^2X3 + ± ^/2X + 1 

W2,l(,A j 

and hence 

(X) = ± ^2^X3 + qX^ ± 9^25^ + 

(b) If g < 0, then the minimal polynomial of 6 is ^^^■^{X). 

But, *-2,3(^) = X4±v^X3-X2=Fy^X+l and hence ^'^sCX) = 

6. Dimension 3 

6.1. Normal Case. In this case (j){4t) = 2g = 6 and there is no such t. 

6.2. Exceptional Case. In this case i^(4i) = 2fif = 6. That implies At e {28,36} 
or t e {7, 9}. In that case, p is odd, t is odd, p divides t, q = 3 mod 4. 

(!) t = 7, p = 7, q = 7^ with r odd, then ^'^^(X) is the minimal polynomial 
of 6*. 

But *7,i(^)*7,i(-^) = ^7{X'^) and therefore, 
*7,i(X) = X^ ± y/^X^ - 3X* T y/^X^ + 3X2 _^ ^/^X - 1. 
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This gives, 

■^l/P (X) = ± v^X'"^ + 3qX^ ± q^/TqX'^ + 3q^X^ ± q'^^/lqX + q^ 

(2) t = 9, p = 3, q = 3^ with r odd, then \E'3^^(X) is the minimal polynomial 
of 61. 
But, 

*3,3(X) = *3,l(^^) =X^± V^X^ - 1 

and hence, 

7. Dimension 4 

7.1. Normal Case. In this case 0(4t) = 2^ = 8. That implies 4t € {16, 20, 24} or 
t e {4, 5, 6}. We have the following possibilities. 

(1) If i = 4 then, 

(a) q is odd and t is even, 

(b) q is even and t^2 mod 4. 
Therefore the minimal polynomial is 

^[f^{X) = X^ + q^ 

for all primes p. 

(2) If t = 5 then, 

(a) q is odd and p]t but p = I mod 4, this implies g 7^ (~5)'", r odd. 

(b) g is even and 2 mod 4. 
Therefore the minimal polynomial is 

{X) =X^- + _ g3x2 + 

for all g 7^ (—5)'', r odd. 

(3) If t = 6 then, 

(a) q is odd and t is even, 
Therefore the minimal polynomial is 

for all primes p ^2. 

7.2. Exceptional Case. In this case i(/'(4f) =2g = S,. That implies 4t e {32, 40, 48, 60} 

or f e {8, 10, 12, 15}. We have the following possibilities. 

(1) Either p is odd, t is odd, p divides t, q = 3 mod 4. In that case t = 15 
then 

(a) either p = 3, q = 3^ with r odd and 'S's^^ (-'^) is the minimal polyno- 
mial of 9. 

Since f 3,5(X) = we have ^l^f^iX) = X^t V3^^' + 2gX6T 

g\/3^X5 + g^x* =f V^X^ + 2X'^ ± g^^S^X + g^ or 

(b) p = 5, q = (—5)'" with r odd and ^'5^(X) is the minimal polynomial 
of 6*. 

We have, *5,3(^) = = X^ ± ^X'^ + 2X^ ± ^flX^ + SX^ ± 

\/5X3 + 2X2 _^ ^ ijgj^pg ^[v^ = X8 ± V^X^ - 

2gX6 ^ q-J^X^ + Sg^X^ ± g2^/=5^x3 - 2g3x2 ^ g^\/^X + g^. 
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(2) t = 2 mod 4, g = (±2)'' with r odd. In that case t = 10 = 2 • 5 mod 4. 

(a) If g > then the minimal polynomial of 6 is 'i!^^\x). 
But, 

vl/2 = ^^^i^ = X8 ± x/2X^ + X^-X^ + X''±^/2X + l 
and hence 

^[v^ [X) = X« ± v/2^X^ + - g2x4 + ^3^2 ^ ^3^2^^ ^4^ 

(b) If g < 0, then the minimal polynomial of 9 is '^^^\{X). 

But, *-2,5(^) = X^± v^X^ - X6 - ^4 - X2 =F V^-^ + 1- There- 
fore ^'^kx) = X^±./^X^ -qX^-q^X^-q^X'^Tq^yT^X + q'^. 



8. Dimension 5 

8.1. Normal Case. In this case 4>{^t) = 2^1 = 10 and there is no such t. 

8.2. Exceptional Case. In this case ^0(4t) = 2g = 10. That implies U = 44 or 
t = 11. In that case, p=ll, g = ll'', then ^j^j^(X) is the minimal polynomial of 

e. But = $11 which implies = X^"^ ^ ^fTlX'^ - 

hX^ ± V^X^ - X^± yf^X^ + X-* ± yf^X^ + ip yf^X - 1. Hence, 
■^\{^{X) = Xi° T yn^X9 + 5gX8 ^ qy/]MX^ - q^X^ ± g^yn^xs - gSj^^ ^ 
g3^/TT^X3 + 5g^X2 =f q^y/TT^X + q^. 

9. Dimension 6 

9.1. Normal Case. In this case ^(4t) = 2g = 12. That implies At e {28,36} or 
t G {7,9}. We have the following possibilities 

(1) Ift = 7then, 

(a) q is odd and p]t but —7=1 mod 4 i.e; q^7^, r odd. 

(b) q is even and t ^ 2 mod 4. 
Therefore the minimal polynomial is 

4f 1(X) = - gXlO + g2x8 - g3x6 + g^^^ _ ^5 ^ ^6 

for g 7^ 7'', r odd. 

(2) If t = 9 then, 

(a) q is odd and p]t but —3=1 mod 4 i.e; g ^ S*", r odd. 

(b) g is even and t ^2 mod 4. 
Therefore the minimal polynomial is 

4f^{X) = X'^-q^X^ + q^ 

for g ^ 3'", r odd. 
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9.2. Exceptional Case. In this case ^0(4i) = 2g = 12. That imphes At € 
{52, 56, 72, 84} or t e {13, 14, 18, 21}. 

(1) Either p is odd, t is odd, p divides t, g = 3 mod 4 

(a) t = p = 13, (J = (—13)'' and ^\^1^{X) is the minimal polynomial 

of 6*. But *i3,i(X)*i3,i(-X) = $i3(X2) which implies *i3,i(X) = 

Xi2±\/T3Xii+7Xio±'3\/T3X9 + 15XS±5\/l3X^ + 19X6±5\/nx5 + 

15X4 ± 3a/I3X3 + ± + 1 and therefore {X) = ± 

y^T3gX"-7gXi0T3gy^T3gX9+15g2x8±5g2y3l^X^-19(7-^X«T 
5g3y3l3^X5 _^ 15^4^4 _^ 3^4^313^X3 _ 7^5 gSy^is^x + r/'. 

(b) t = 21, then 

(i) p = 3, 5 = 3'' with r odd and ^'3^^(X) is the minimal polyno- 
mial of 9. 

But *3,7(^) = ^y/ff = ± - 2X10 T \/=3X9 + 

X^ + + X" ± V^X3 - 2X2 -p + 1 

and hence *|,^(X) = X^^ ± V3gX" + 2qX^^ ± q^SgX^ + 

g^X® - g3x6 + g4^4 _^ g4^^3 _^ 2g5x2 ± g^^X + OX 

(ii) p = 7, q = 7^ with r odd and ^7^^ (X) is the minimal polyno- 
mial of 6. 

^^^s{X) = = Xi2 ± ^X" - 4X10 T \/=7X9 - X8 T 

2v^X^ 7X6 ± 2^37x5 - X^ ± x/^X3 - 4X2 y^x + 1. Hence, 
(X) = Xi2 ± yT^X" +4gXio ± (Zv^X9 - q2x8 T 2g2^x7 - 
7g3x0 ip 2g3/7^x5 - ^4x4 ± q^^X^ + Aq^X^ ± q^^/lqX + g^. 

(2) t = 2 mod 4, g even. 

(a) f = 14 = 2 • 7 mod 4. 

(i) If g > then the minimal polynomial of 9 is 5*2^' (X). 

But *2,7(X) = = T \/2X" + Xio - X« ± V2X^ - 

X6 ± V2X5 - X4 + X2 ip V2X + 1 and hence, ■^\^\x) = 
Xi2 ^ ^Xii + gXio - g2x8 ± q^^X^ - g^X^ ± g^'^X^ - 

g4x4 + g5X2Tg5y2^X + g6. 

(ii) If g < 0, then the minimal polynomial of 9 is ^'[^^(X). 

But, *-2,7(X) = Xi2 ± y=2X" - Xio - X8 ip 7=^2X7 + X^ ± 
\/=2X5 - X^ - X2 =F \/=^X -I- 1 

*L^7(X) = Xi2 ± y^X" - gXi" - g2x8 T q'sR^X^ + 
g3x6 ± ^3^32^x5 - g4x4 - g5x2 ip q^y/^X + q^ 

(b) f = 18 = 2 • 9 mod 4 with g even. In that case, 

(i) If g > then the minimal polynomial of 6 is ^'2^'(X). 
But, 

M.2,9(X) = = Xi2 ± V2X^ + X^± V2X' + 1. 

y^2,i(X'^) 

and hence, 

*[^(X) = Xi2 ± g^XO + g^X^ ± g4^X3 + g^. 
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(ii) If g < 0, then the minimal polynomial of 9 is ^^^\{X). 
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But, *_2,9(^) = ^ ± ^f^X^ -X^T ^f^X^ + 1. Therefore 
^L^lg(X) = ± q^^X^ - q^X^ ± q^^^X^ + q\ 

10. Dimension 7 

10.1. Normal Case. In this case 0(4^) ~ 2g = 14 and there is no such t. 

10.2. Exceptional Case. In this case ^(/!'(4<) = 2^ = 14 and there is no such t. 

11. Even Case 

If P{X) is a supersingular Weil polynomial with all real roots, over ¥q with 
q = p", n is even, then P{X) — X±y/q, then we have least common multiple of local 
invariants as 2, hence P{X)'^ is a characteristic polynomial of simple supersingular 
abelian variety of dimension 1. We have the following Theorem which states all the 
possible characteristic polynomials of abelian varieties over ¥q. 

Theorem 11.1. Let (j){m) = 2g. Then {^b{^\x)Y is a characteristic polynomial 
of Frobenius endomorphism of a simple supersingular abelian variety of dimension 
ge owerFq, q = p^ , n even, where 

order of p in the multiplicative group U{1i/mZ,) , if {p,m) = 1; 

f{p^ —p^~^), f is order of p in the multiplicative group IJ(1jIs%) if m =p^s. 

and 

1, if r is even; 

2, if r is odd. 

Proof. Let P{X) be an irreducible supersingular Weil-g-polynomial of degree 2g. 
Since q is an even power of prime, ^/q G Z. Using Honda- Tate theorem 12.41 '^^ g^t 
-^{P{^X)) is an irreducible cyclotomic polynomial $m over Z of degree 2g, i.e. 

(f)[m) = 2g. Therefore P{X) = $[^'(X) is an irreducible supersingular Weil poly- 
nomial. To determine the dimension of the corresponding abelian variety to P{X), 
we will need to factorise P{X) over Qp. If P{X) = Y[fr{X) is the factorisation 

i 

over then 

inv..(Endk(A)(g>Q) = ^^^^^^^ mod Z = mod Z. 

Vp{q) 2 

Since P{X) = $LY^(X), invp^{Endk{A) «) Q) = ^^j-^ mod Z, where $,„(X) = 

ri{X) over Qp. But it follows from the chapter IV. 4 in [7] that deg = r, where 

i 

order oi p in the multiplicative group C/(Z/mZ) , if {p,m) = 1; 

/(p'^ — p'^"^), where / is order of p in the multiplicative group C/(Z/,sZ), if m = p'^s. 

Hence 

1 1 if T' is even' 
^nv,AEnd,{A)^Q) = )^ 2 if r is odd.' 

= e . 

From Theorem 12.61 2 dim A = edcgP(X) or dim A — eg. □ 
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12. Summary of results for dimensions 1 to 7 



We gather the hst of characteristic polynomials, from dimensions 1 to 7. 

Theorem 12.1. Let A be an supersingular simple ahelian variety over Fg, where 
q — , n odd. Then characteristic polynomial of A is given by 



(1) Dimension 1 (Deuring and Waterhouse[51 [T]) 

(a) p^2:X^± y/2^X + q, 

(b) p = 3 : ^2 ± y/^X + q, 

(c) X^ + q. 

(2) Dimension 2 (C.Xing, D.Maisner and E.Nart^ [TO]) 

(a) p^i:X^-qX^ + q^, 

(b) X^ + qX^ + q^, 

(c) p^2:X^± ^X^ + qX'^ ± q^X + q^ , 

(d) p = b:X^± ^X^ + 3qX^ ± q^X + q^ , 

(e) {X^-qf, 

(f) p^2:X^ + q^. 

(3) Dimension 3 (E.Nart, C.Ritzenthaler and S.Haloui [TTIIT^ ) 

(a) p = 3 : ± qy/pqX^ + , or 

(b) p^7 ■.X^± JpqX^ + 3qX'^ ± q^/pqX^ + Sg^X^ ± q^^X + q^ . 

(4) Dimension 4 ( S.Haloui, V.Singh TS') 

(a) X« + q\ 

(b) X» - qX^ + q^X^ - q^X^ + q\ 

(c) p ^ 5 : X8 + qX<^ + q^X^ + q^X^ + q^ , 
{A) p^2:X^- q^X^ + q\ 

(e) p^i:X^± ^X^ + 2qX^ ± q^X^ + (^X^ ± q^^X'^ + 2q^X'^ ± 
g^ys^X + q\ 

(f ) p = 5 : X8 ± VSgX^ + 2qX^ ± qy/5qX^ + 3q^X^ ± q^y/5qX^ + 2q^X^ ± 
q^V^qX + q\ 

(g) p = 2:X^± ^X'^ + qX^ - q^X'^ + q^X^ ± q^^X + g*. 



(a) =F \/TTgX9 + ^qX^ =f gyiT^^^ - q^X^ ± g^yn^xs - g^x* =p 
g^yn^X^ + S^^X^ ip q^y/TT^X + q^. 



(a) + qX^° + q^X^ + q^X^ + q'^X^ + q^X"^ + q^ , 

(b) p ^ 7 : - gXl" + ^2X8 - + ^4^4 _ ^5^2 ^ ^6^ 

(c) X42 + g3x'^ + g^ 

(d) p^3:Xl2-g3^6+g6, 

(e) X42±yT3^x"+7gX40±3gyT3gX9+15g2x8±5g2yT3^X^+19g3x6± 
Sq^yngX^ + Ibq^X^ ± "iq^^/l^qX^ + 79^X2 ± q^y/J2qX + 9^ 



(f) Xi2 ± 73^x11 + 2gXi"± 9^3^X9 + g2xs-g3x6 + q4x4±54 ^^3^ 
2q5x2±q5 73gX + g6. 

(g) ^42 ± /f^X4i + 4qX40 ± qy/T^X^ - q^X^ T 2q^y/T^X'^ - Iq^X"^ T 
2q^^X^ - q^X^ ± q^y/lqX"^ + 4g5x2 ± q^ y/lqX + 

(h) ^42 ip 72^X41 + qX40 - g2x« ± q^^X'^ - q^X^ ± q^y/2^X^ - q^X^ + 
q'^X^Tq^V^X + q^, 

(i) ^42 ± qy/^X^ + q^X^ ± q^^X^ + q^ . 



(5) 



Dimension 5 



(6) 



Dimension 6 
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(7) Dimension 7 

There is no supersingular simple abelian variety of dimension 7. 

Theorem 12.2. Let A be an supersingular simple abelian variety over ¥q, where 
q ^ p"^ , n even. Then characteristic polynomial of A is given by 

(1) Dimension 1 (Deuring and Water house O [1]) 

(a) X^+X^+q, p^\ mods, 

(b) + p ^ 1 mod 4, 

(c) X2 - X^ +q . p^l mod 6, 

(d) ix±^)\ 

(2) Dimension 2 (C.Xmg, D.Maisner and E.Nart[9l HO]) 

(a) (X^ +X^+q)^, p=l mods, 

(b) (X^ + qf, p = 1 mod 4, 

(c) [X"^ ^ X^+qf , p=l mode, 

(d) + + + g3/2x + p^l mods, 
(c) X^ + q^, p^l mod 8, 

(f) X^ - ^X^ + qX'^ - q^/'^X + q^, p^l mod 10, 

(g) X'^-qX'^+q^, p^l mod 12. 

(3) Dimension 3 (E.Nart, C.Ritzenthaler and S.Haloui [III US]) 

(a) X^ + ^X^ + qX^ + q^/'^X^ + q^X'^ + q'^/'^X + q^, p^l, 2, 4 mod 7, 

(b) X^ + q^/^X'^ + q^, p^l , 4, 7 mod 9, 

(c) X^ - ^X^ + qX* - q^/'^X^ + q^X"^ - q^l'^X + q^ , p ^ 1, 9, 11 
mod 14, 

(d) X6-q3/2jj^3^q3^ 1,7, 13 mod 18. 

(4) Dimension 4 ( S.Haloui, V.Singh 13 ) 

(a) (X" + ^X^ + qX^ + q^l'^X + q^f , p = 1 mod 5, 

(b) {X^^q^ f, p= \ mod 8, 

(c) {X'^ - ^X"^ ^qX'^ -q^l'^X + q^f, p=\ mod 10, 

(d) (X4-gX2 + g2)2^ mod 12, 

(e) X^ - ^X'^ + q^/'^X-' - q^X^ + q^'^X^ - q'^'^X + q"^ , p ^ 1 mod 15, 

(f) X^ + q'^,p^l mod 16, 

(g) X^ - qX^ + q^X'^ - q^X"^ + q'^ , p ^ 1 mod 20, 

(h) X» - q^X^ + q'^,p^l mod 24, 

(i) X^ + ^X'^ - q^l'^X^ - q^X^ - q^l'^X^ + q^l'^X + q^ , p ^ I mod 30. 

(5) Dimension 5 

(a) + ^X^ + qX» + q3/2x7 + g2^6 ^ ^5/2^5 ^ ^3^4 ^ ^7/2^3 ^ 

q'^X^ + q^/^X + 1,3,4,5,9 mod 11, 

(b) X^° - ^X^ + qX» - g3/2x7 + g2^6 _ g5/2^5 ^ ^3^4 _ ^7/2^3 ^ 

q-^X^ ~ q^/^X + q'^, 1,3,5,9,15 mod 22. 

(6) Dimension 6 

(a) (X*^ + ^X'-' + qX^ + q^l'^X^ + q^X"^ + q^/'^X + q^f, p = 1 , 2, 4 
mod 7, 

(b) (XS + g3/2x3 + q3)2^ p=l , 4, 7 mod 9, 

(c) {X^ - y^X^ + qX^ - q^/^X^ + q^X^ - q^/^X + q^f , p = 1 , 9, 11 
mod 14, 

(d) {X^ -q^l^X^ + q^f, p = 1, 7, 13 mod 18, 
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(e) + + gXio + g3/2x9 + q^X^ + q^'^X^ + q'X^ + q^^X^ + 
q4X'' + g^/2;^3_^g5x2 + gii/2x + g6_ 1,3,9 mod 13, 

(f) - + q3/2x9 - g2x8 + qS^e _ ^4^4 ^ ^9/2^3 _ ^11/2^ ^ ^6^ 

1,4,16 mod 21, 

(g) - + gXlO - g3/2x9 + g2x8 - q^'^X^ + - ^7/2^5 ^ 

q4j^4_g9/2^3_^^5^2_gii/2^^^6^ 1,3,9 mod 26, 

(h) X'^^-qX^^ + q^X^-q^X^ + q'^X^-q^X^ + q^, 1,9,25 mod 28, 

(i) -qSjj^e ^^6^ ;l 23,25 mod 36, 

(j) X^^ + V?^" - q'^^X^ - q^X^ + q^X^ - q^X* - q^/^X^ + g"/2x + 
1,25,37 mod 42. 
(7) Dimension 7 

There is no supersingular simple abelian variety of dimension 7. 

Proof. The proof of this theorem, follows from the straightforward calculations 
using Theorem lll.il □ 

13. Existence of supersingular abelian varieties 

There are two important existential questions. 

(1) Given a positive integer d and q = p"', does there exist a simple supersin- 
gular abelian variety of dimension d over Fg? 

(2) How many isogeny classes of simple supersingular abelian varieties are there 
over ¥q for a given dimension? 

In this section, we will give partial answers to these questions. 

Theorem 13.1. Let g > 2 be an odd positive integer and q — p", n even. Then 
the characteristic polynomial of a supersingular simple abelian variety over ¥q di- 
mension g is irreducible. 

Proof. The characteristic polynomials of supersingular simple abelian variety of di- 
mension g are P{XY, where e — 1 or e — 2. When e — 1, P{X) is a supersingular 
Weil polynomial of degree 2g and when e = 2, P{X) is a supersingular Weil poly- 
nomial of degree g. Also all non linear Weil polynomials have even degree. Since 
g > 2 and g is odd, e = 2 is not possible and hence the theorem follows. □ 

Theorem 13.2. Let g > 2. Then there is no simple supersingular abelian variety 
over ¥q, with q = p" , n even, of dimension g if and only if 4'^^{g) and (j)^^[2g) are 
empty sets. 

Proof. A supersingular irreducible Weil polynomial of degree 2g is given by $[^' [X) , 
where <p(rn) = 2g. The characteristic polynomials of supersingular simple abelian 
variety of dimension g are either irreducible supersingular Weil polynomials of de- 
gree 2g or the square of an irreducible supersingular Weil polynomials of degree 
g. There are no supersingular irreducible Weil polynomials of degree g and 2g if 
(ty'^ig) and (f)~^{2g) are empty sets, respectively. Conversely let (ji'^ig) or (j)^^{2g) 
be non empty set. If 4>~^{g) is not empty and g > 2 this implies g is even. If 

0(m) = g, then then by Theorem 111.11 ($1^^ {X)Y is a characteristic polynomial 
of simple supersingular abelian variety over ¥q of dimension where e the order 
of p mod m + 1 i.e; where e = 1 or e = 2. For p such that order of p modulo m 
is odd, ($[^(A"))'^ is a characteristic polynomial of simple supersingular abelian 
variety over of dimension g. Similarly if 4>~^{2g) is non empty, for all primes p 
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such that order of p modulo m is even, and repeating the argument above, we get 
(X) is characteristic polynomial of a simple supersingular abelian variety of 
dimension g. Hence the theorem follows. □ 

Remark 13.3. Given an integer m > 2, there are infinitely many primes which have 
an even order modulo m and there are infinitely many primes which have an odd 
order modulo to. 

Theorem 13.4. Let g > 2. Then there is no simple supersingular abelian variety 
over ¥q, with q = p" , n odd, of dimension g if (j)^^[g) and (j)^^{2g) are all empty 
sets. 

Proof. Let q = p^ , n odd. By Theorem l3.3l and Remark l3.41 there are no irreducible 
supersingular Weil polynomial of degree 2g if 0(4i) — 2g with and ■^<j>{4:t) — 2g has 
no solution for t. If 2|m then we have <j){2m) — 2<j){m). Therefore, 0{4t) = 2g and 
^(4t) = Ag has solutions for t if and only if (f>{2t) ~ g 4>{2t) = 2g has solutions for 
t. Therefore there is no irreducible supersingular Weil polynomial of degree 2g if 
4>~^{2g) and (t>~^{g) has no solution. Since the characteristic polynomial of a simple 
supersingular abelian variety of dimension g > 2 is irreducible, the result follows. 

□ 

Though the complete characterisation of values of inverse of Euler function is a 
difficult problem, the above two theorems provide the following partial result. 

Corollary 13.5. If p is prime greater than 2 such that 2p + 1 is not primefi.e. p 
is not a Sophie Germain prime) then is no simple supersingular abelian variety of 
dimension p over finite fields. 

Therefore it follows from Theorems 113.21 and 113. 4[ that for the following dimen- 
sions g < 100 there are no simple supersingular abelian varieties, 
prime : 7, 13, 17, 19, 31, 37, 43, 47, 61, 67, 71, 73, 79, 97. 
composite: 25, 27, 34, 38, 45, 57, 62, 63, 76, 77, 85, 87, 91, 93, 94, 95. 

Theorem 13.6. There are infinitely many positive integers g such that there is no 
simple supersingular abelian variety of dimension g over finite fields. 

Proof. We will show the Theorem using the fact that by there are infinitely many 
primes satisfying Corollary 113.51 It is well known that there are infinitely many 
primes congruent to 5 mod 6 which implies 2p + 1 = 4 mod 6. Hence 2p + 1 in 
this family is not prime and the Theorem follows. □ 

The following result is in contrast to Theorem 113.61 

Theorem 13.7. There are infinitely many positive integers g such that there are 
simple supersingular abelian varieties of dimension g. 

Proof. There are infinitely many positive integers g such that 4>~^{g) or (j)~^{2g) are 
not all empty sets. From Theorem ll3.2l and Remark 113.31 there is a supersingular 
simple abelian variety of dimension g over F^, where g is a square for infinitely 
many primes p and hence this result follows. □ 

Let Gq^g denote the number of isogeny classes of supersingular simple abelian 
varieties of dimension g over Fg and A(rn) := ^{x\(p{x) = to}. 
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Theorem 13.8. If g > 1 and q =p", n even, then 

G,^g = A{2g){o{p,2g) + 1) + A{g){o{p,g)), 
where o{p, k) ~ the order of p mod k, taken mod 2. 

Proof. It follows easily from Tlieorem lll.il □ 
Theorem 13.9. Ifg > 2 q =p", n odd, then 

G,^,<{{-ir+' + l)A{2g) + 2 ^ u^in), 

neA{2g) 

where uj(n) is the number of distinct prime factors of n. 

Proof. The proof follows from counting the supersingular irreducible Weil polyno- 
mial of degree 2g both in exceptional and normal case from the Theorem 13.31 

□ 
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